CVE-2026-0879

CRITICAL

CVSS v3.1: 9.8 · EPSS: 0.0055 (41.8 percentile)

NetworkNo privilegesNo user interactionMemory CorruptionVendor advisory ref

Source data as of:

At a glance

Severity
CRITICAL
CVSS
9.8 v3.1 · NVD
EPSS
0.0055 (41.8 percentile) · FIRST.org
CISA KEV
No
Type
Memory Corruption · NVD CWE
Attack conditions (CVSS vector)
NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors
mozilla
Published
2026-01-13 · Modified: 2026-06-30

CVSS / EPSS / KEV

CVSS v3.1 9.8 / 10 CRITICAL Source: NVD
EPSS 0.0055 41.8 percentile Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Record details

CVE ID
CVE-2026-0879
CVSS (v3.1)
9.8 (CRITICAL)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore
3.9
Impact subscore
5.9
EPSS
0.0055 (41.8 percentile) — 2026-06-30
CISA KEV
No
Weakness (CWE)
CWE-119
Affected vendors
mozilla
Affected configurations (CPE)
5
Published
2026-01-13
Modified
2026-06-30
Status
Modified

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.